Managing company Windows devices, where do I start?

[Levent]

Hello.

 

Currently company is providing devices with no AD or any supervision. Current or the past sysadmins did not bother implementing AD or any sort of supervision and this has been getting on my nerves. I have to ask the personnel for their anydesk/teamviewer every time they require my attention. There is also the situation of personnel installing all kinds of shit to their computers, even going as far as "debloating" their work computers and breaking shit left and right. I have never dealt enterprise device management before, where do I start?

 

I also wouldnt mind having a WSUS to control which updates are rolled out to all of our devices and when.

[191x7]

Active Directory

Wsus / Msupdate

TightVNC (set up everywhere with the same password)

 

Also, if you want to be brutal, Voodoo Shield and an Antivirus/Security suite that you can use to block certain websites, types of content etc.

[Levent]

19 minutes ago, 191x7 said:

Active Directory

Wsus / Msupdate

TightVNC (set up everywhere with the same password)

 

Also, if you want to be brutal, Voodoo Shield and an Antivirus/Security suite that you can use to block certain websites, types of content etc.

Forgive me for being clueless but is there a way to just access user devices through AD or a similar already integrated windows feature? RDP is out of the question as clients are not connected to our VPN.

[Anghammarad]

The best things to access Users devices remotely still are Teamviewer or Anydesk. 

 

Here I rolled out an AD, still a few devices left to join, as addition like you mentioned a WSUS to be able to disallow certain updates and save on used bandwith. one Download of patches instead of downlod*number of devices needing updates.

 

Well right now I'm always running between two locations, a new one, just aquired and the old office or even a thrid location the old warehouse. 

For normal support I use Teamviewer on the devices. 

 

And gotta go over to the new location, getting a label printer running, cloning a dying nvme in a laptop and switching that... perhaps taking apart the local network again and rearrange it before putting it back together. 

 

Lots to do as only IT guy, who needs a full time member in the IT departement (waiting for over a year now) 

[191x7]

21 minutes ago, Levent said:

Forgive me for being clueless but is there a way to just access user devices through AD or a similar already integrated windows feature? RDP is out of the question as clients are not connected to our VPN.

I work in hospital IT, we have hundreds of computers.

Using built in Windows remote desktop to connect usually disconnects (logs out) the use on the machine. That's why VNC and/or other remote desktop softwares.